Guardium Data Encryption@3.0.0.2 Security Vulnerabilities and Issues — Guardium Data Encryption@3.0.0.2 CVE List

Lucene search

IbmGuardium Data Encryption3.0.0.2

5 matches found

CVE•added 2021/07/07 5:15 p.m.•36 views

CVE-2021-20378

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 195709.

8.8CVSS8.2AI score0.00099EPSS

CVE•added 2021/07/07 5:15 p.m.•35 views

CVE-2021-20379

IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195711.

7.5CVSS7.4AI score0.00047EPSS

CVE•added 2021/07/07 5:15 p.m.•33 views

CVE-2021-20474

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

7.5CVSS7.8AI score0.00044EPSS

CVE•added 2021/07/12 4:15 p.m.•32 views

CVE-2021-20414

IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216.

4.9CVSS4.7AI score0.00102EPSS

CVE•added 2021/07/07 5:15 p.m.•28 views

CVE-2021-20416

IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 196218.

5.3CVSS5.6AI score0.00094EPSS